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DOE CENTER FOR COMPUTER SECURITY 


• FIRST NOTIFICATION FROM HQ 
0700 MST NOVEMBER 3 

• MAJOR EFFORT 
NOTIFICATION EFKS RT 

DOE SITES 
DISCONNECT 

GATHERING I NIB RM ATI ON 
HQ 

LIVERMORE 

FOLLOW-UP INFO TO DOE SITES 
WORK WITH EXPERTS ON VIRUS 
CONFLICTING INFO ON FIXES/ELIMINATION 
PREVENTION PATCHES 


INTEGRATED COMPUTER NETWORK 


• WHEN NOTIFIED - HAD ALREADY SEEN VIRUS 
(NOT IN CLASSIFIED) 

• ISOLATED VAX IN UNCALSSIFIED NETWORK 

• CAPTURED PART OF VIRUS 

• FIXTO SENDMAIL 

• ELIMINATION/CLEARING EFFORT 


-LINKED TO ARPANET & MILNET (UNCLASSIFIED) 
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PROBLEMS SEEN 


DIFFERENT PATCHES - 
WHICH ARE OK? 

WHO DO YOU BELIEVE? 

ETHERE A VIRUS IN THE PATCH? 

PASSED BY NON-TECHNICAL PEOPLE TO NON-TECHNICAL 
PEOPLE 

SLOW DISSEMINATION OF INFORMATION 
CONFLICTING INFORMATION 
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